Legal
Security
How we protect your account, designs, and order data.
Authentication
Passwords hashed with bcrypt (cost factor 10). Session tokens are stateless JWTs signed with a rotating secret.
Data in transit
All traffic encrypted over TLS 1.2+. Assets served via CDN with HSTS.
Responsible disclosure
Security researchers: email security@onewpc.example. We acknowledge within one business day.